Vitalis Privacy Supplement

Vitalis is a wellness app for tracking biological age and following longevity protocols. This page describes the data processing specific to Vitalis: health inputs, AI processing and face data.

Our general policy, which applies to every Codition AI app, is on the Privacy Policy page. Where the two differ, this supplement governs Vitalis.

Vitalis is not a medical device. It does not diagnose conditions or prescribe treatment.

• Account details: your email address, or the identity returned by the provider when you sign in with Apple or Google.
• Health inputs: age, sex, height, weight, blood test values, lifestyle assessment answers, protocol progress and the messages you write to the coach.
• Images: the selfies you take for the face scan and the lab report photos you upload.
• Audio: the recording made when you use the voice coach.
• Usage data: screens opened, buttons tapped and crash reports.

To produce your analysis we send your data to third-party AI providers. Google (Gemini API) is the primary provider; OpenAI and OpenRouter are used as backups when Google cannot respond.

What is sent: your coach messages, blood values, lab report images, lifestyle answers, age and sex, face scan selfies and voice coach recordings.

What is not sent: your name, email address, payment details and location.

This sharing starts only after you give explicit consent inside the app. The consent screen appears before the first action that sends data and lists what goes where. You can withdraw consent at any time in Settings > Privacy and data; AI features stop working while it is withdrawn.

For the face scan and future face features, the selfie you take is sent to the Google Gemini API to estimate perceived age and skin indicators.

We do not perform facial recognition and we do not create a biometric identity template. We never use your selfie for identity verification, advertising or AI model training, and we never share it with advertising providers.

For the face scan, the original selfie is not stored on our servers; it is discarded immediately after analysis. Only the numeric results (perceived age, skin age and indicators scored 0-100) are saved to your account.

For future face, the images generated by the AI are stored in your account in a private area only you can access, and are kept until you delete them. Deleting your account permanently deletes those images too.

Your data is held in an encrypted database, and row-level security rules make it accessible only through your own account.

We keep your account data until you delete it. AI providers process data transiently to answer your request; their own retention is governed by their terms.

You can permanently delete your account in-app via Settings > Delete Account. Details are on our Account Deletion page.

Besides the AI providers, we work with service providers that keep the app running: hosting and database, subscription management, error reporting and anonymous usage statistics. They all process data on our behalf and under contract.

We do not sell your data for advertising and we do not share it with data brokers.

You can access your data inside the app, permanently delete your account and all of its data via Settings > Delete Account, withdraw AI data sharing consent in Settings > Privacy and data, and manage notification and camera permissions in the iOS Settings app. To exercise your KVKK Art. 11 and GDPR rights, email bekir@codition.co.

Vitalis is not designed for anyone under 18 and we do not knowingly collect data from children. If you believe a child has sent us data, contact us and we will delete the account.

For privacy questions, data access requests or deletion requests: bekir@codition.co.